Bloomberg Comdb2 code issue vulnerabilities

Bloomberg Comdb2 is a Bloomberg open source distributed relational database management system. A code issue vulnerability exists in Bloomberg Comdb2 version 8.1, which stems from a null pointer dereference in the CDB2SQLQUERY protocol buffer message handling, which could lead to a denial of servi...

Bloomberg Comdb2 code issue vulnerabilities

Bloomberg Comdb2 is a Bloomberg open source distributed relational database management system. A code issue vulnerability exists in Bloomberg Comdb2 version 8.1, which stems from a null pointer dereference in the netconnectmsg protocol buffer message function, which could lead to a denial of...

PT-2025-30430 · Bloomberg · Bloomberg Comdb2

Name of the Vulnerable Software and Affected Versions: Bloomberg Comdb2 version 8.1 Description: A denial of service issue exists in the Bloomberg Comdb2 database when processing a distributed transaction heartbeat. Sending a specially crafted protocol buffer message to a database instance over T...

PT-2025-30431 · Bloomberg · Bloomberg Comdb2

Name of the Vulnerable Software and Affected Versions: Bloomberg Comdb2 version 8.1 Description: A null pointer dereference vulnerability exists in the net connectmsg Protocol Buffer Message functionality. Receiving specially crafted network packets can lead to a denial of service. An attacker ca...

PT-2025-30433 · Bloomberg · Bloomberg Comdb2

Name of the Vulnerable Software and Affected Versions: Bloomberg Comdb2 version 8.1 Description: A null pointer dereference issue exists in the Distributed Transaction component when processing fields used for coordination. Sending a specially crafted protocol buffer message can lead to a denial ...

PT-2025-30429 · Bloomberg · Bloomberg Comdb2

Name of the Vulnerable Software and Affected Versions: Bloomberg Comdb2 version 8.1 Description: A null pointer dereference vulnerability exists in the CDB2SQLQUERY protocol buffer message handling. A specially crafted protocol buffer message can lead to a denial of service. An attacker can conne...

PT-2025-30432 · Unknown · Bloomberg Comdb2

Name of the Vulnerable Software and Affected Versions: Bloomberg Comdb2 version 8.1 Description: A denial of service issue exists in the Distributed Transaction Commit/Abort Operation functionality. A specially crafted network packet can lead to a denial of service. An attacker can send a malicio...

Bloomberg Comdb2 security vulnerabilities

Bloomberg Comdb2 is a Bloomberg open source distributed relational database management system. A security vulnerability exists in Bloomberg Comdb2 version 8.1 that stems from vulnerability to denial-of-service attacks when handling distributed transactional heartbeats...

CVE-2025-48498: NULL Pointer Dereference

A null pointer dereference vulnerability exists in the Distributed Transaction component of Bloomberg Comdb2 8.1 when processing a number of fields used for coordination. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database...

CVE-2025-46354: Reachable Assertion

A denial of service vulnerability exists in the Distributed Transaction Commit/Abort Operation functionality of Bloomberg Comdb2 8.1. A specially crafted network packet can lead to a denial of service. An attacker can send a malicious packet to trigger this vulnerability...

CVE-2025-36520: NULL Pointer Dereference

A null pointer dereference vulnerability exists in the netconnectmsg Protocol Buffer Message functionality of Bloomberg Comdb2 8.1. A specially crafted network packets can lead to a denial of service. An attacker can send packets to trigger this vulnerability...

CVE-2025-36512: Reachable Assertion

A denial of service vulnerability exists in the Bloomberg Comdb2 8.1 database when handling a distributed transaction heartbeat. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send the crafted message...

Bloomberg Comdb2 code issue vulnerabilities

Bloomberg Comdb2 is a Bloomberg open source distributed relational database management system. A code issue vulnerability exists in Bloomberg Comdb2 version 8.1, which stems from a null pointer dereference in the handling of coordinated fields by the distributed transaction component, potentially...

CVE-2025-35966: NULL Pointer Dereference

A null pointer dereference vulnerability exists in the CDB2SQLQUERY protocol buffer message handling of Bloomberg Comdb2 8.1. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send the crafted message to...

Bloomberg Comdb2 net_connectmsg Protocol Buffer Message null pointer dereference vulnerability

Talos Vulnerability Report TALOS-2025-2197 Bloomberg Comdb2 netconnectmsg Protocol Buffer Message null pointer dereference vulnerability July 22, 2025 CVE Number CVE-2025-36520 SUMMARY A null pointer dereference vulnerability exists in the netconnectmsg Protocol Buffer Message functionality of...

Bloomberg Comdb2 Distributed Transaction Coordination Fields denial of service vulnerability

Talos Vulnerability Report TALOS-2025-2199 Bloomberg Comdb2 Distributed Transaction Coordination Fields denial of service vulnerability July 22, 2025 CVE Number CVE-2025-48498 SUMMARY A null pointer dereference vulnerability exists in the Distributed Transaction component of Bloomberg Comdb2 8.1...

Bloomberg Comdb2 CDB2SQLQUERY Protocol Buffer Message null pointer dereference vulnerability

Talos Vulnerability Report TALOS-2025-2201 Bloomberg Comdb2 CDB2SQLQUERY Protocol Buffer Message null pointer dereference vulnerability July 22, 2025 CVE Number CVE-2025-35966 SUMMARY A null pointer dereference vulnerability exists in the CDB2SQLQUERY protocol buffer message handling of Bloomberg...

Bloomberg Comdb2 Distributed Transaction Heartbeat denial of service vulnerability

Talos Vulnerability Report TALOS-2025-2200 Bloomberg Comdb2 Distributed Transaction Heartbeat denial of service vulnerability July 22, 2025 CVE Number CVE-2025-36512 SUMMARY A denial of service vulnerability exists in the Bloomberg Comdb2 8.1 database when handling a distributed transaction...

Bloomberg Comdb2 Distributed Transaction Commit/Abort Operation denial of service vulnerability

Talos Vulnerability Report TALOS-2025-2198 Bloomberg Comdb2 Distributed Transaction Commit/Abort Operation denial of service vulnerability July 22, 2025 CVE Number CVE-2025-46354 SUMMARY A denial of service vulnerability exists in the Distributed Transaction Commit/Abort Operation functionality o...